Stupid ACS / Windows question

[Randall White]

Hi,

I am setting up ACS on a member server to integrate with the Windows AD user database. In the ACS 3.3 installation guide, it says I need to setup a workstation named CISCO and allow users permission to log into into it.

My stupid question is exactly how do I allow users permission to log into CISCO? I have created the CISCO workstation, but it doesn't show up as an option in the user's folder. I am an IOS guy w/ limited AD experience, I have gone through the Cisco and Windows documentation without any luck.

Thanks, R

[gfullage]

You don't have to create a workstation called CISCO. You need to create a computer account called CISCO, then allow all users to login to this account. I'm no Windows guru, but I believe Windows needs to know what workstation each user is logging in from, so it creates a computer account when each computer joins the domain. You can then specify what users can login to that computer.

To be honest though, I doubt you need to do any of this. Most places simply allow every user to log in everywhere with no restrictions, and if that is the case, then you shouldn't need anything on the Windows side done. Just try authenticating users on ACS first, you will probably find it works without having to do any of this extra stuff.